How to Install SCCM Client Agents on Workgroup Computers

This post details steps to install SCCM client agents on workgroup computers. There are many ways to install SCCM client agent on a domain joined computer. In fact we are aware of these installation methods and we choose to use the easiest one out of it. But what about client agent installation on non-domain or workgroup computers ?. This post should help if you are looking to install client on workgroup machines.

Before you install SCCM client agent on workgroup computer, you must know the following things.

  • The workgroup system should be able to resolve the FQDN of management point.
  • During client installation, logged-on user must have local administrator rights on the workgroup computer.
  • Configure network access account prior to installing client agent.
  • Adding entries of distribution point and management point in hosts file of workgroup computer should help.
  • Most of all Client push installation is not possible.
  • Ensure ports requirements are met using this guide.

Install SCCM Client Agents on Workgroup Computers

Let’s look at the steps for installing SCCM client agents on workgroup computers. In my lab setup I have got a SCCM version 1706 installed. I have got a virtual machine running Windows 7 Professional edition. This machine is in workgroup and can ping to the domain controller. On the workgroup computer I have got the client agent install files.

Install SCCM Client Agents on Workgroup Computers

On the workgroup machine, launch the command prompt as administrator. Set the folder path to where the client installation files are present. Next type the below command and hit enter to begin the client installation.

Syntax :-

ccmsetup.exe /mp:<Management Point FQDN> SMSSITECODE=PPP SMSMP=<Management Point FQDN> DNSSUFFIX=<domain suffix>

Usage :-


For more command line options, use this guide.

Install SCCM Client Agents on Workgroup Computers

On the workgroup computer monitor ClientLocation.log, LocationServices.log and ccmsetup.log files.

Install SCCM Client Agents on Workgroup Computers

Under configuration manager properties, check for the assigned management point. If the management point entry shows blank then probably the computer cannot resolve MP FQDN. Under Actions tab, you may find just 2 action cycles initially. However wait for few more minutes to see all the cycles displayed.

Install SCCM Client Agents on Workgroup ComputersBy default the client approval method is set to automatically approve computers in trusted domain. Therefore one has to approve workgroup computer manually. You will find this info under Hierarchy settings > Client approval and conflicting records tab.

Install SCCM Client Agents on Workgroup ComputersOnce the client agent is installed launch the configuration manager console. Under Devices you will find the workgroup computer. Notice that the device shows Not Approved. Right click the device and click Approve.

Install SCCM Client Agents on Workgroup Computers

On the confirmation box click Yes.

Install SCCM Client Agents on Workgroup Computers

We have successfully installed client agent on workgroup computer.

Install SCCM Client Agents on Workgroup Computers

Need Assistance?

Send us a message or post your question in forums.

7 thoughts on “How to Install SCCM Client Agents on Workgroup Computers”

  1. Hi Praj,
    Am I correct in thinking that once the client is installed, it will not receive future Client update versions automatically from the MP? We would need to install newer Client versions manually?


  2. Thanks for this, I was wondering the implications of adding guest computers?
    We’re a University offering labs remotely using free software, but pre-configured. We would like to explore adding their personal computers to our SCCM, but in the most basic way possible. IE. Just grant a list of applications and packages for optional installs. I don’t want to manage any other aspect of their computers (no WSUS, inventories, etc.), nor do I want their computers somehow compromising our system either. Which makes me wonder why they ask “only if you trust them”.
    Is it hard to keep them separate from our fully managed computers within the console?
    Can you eject them from your SCCM after they graduate/leave?

  3. I am using PKI environment in SCCM 1802. i have deployed client certificate using GPO for all domain joined machine and the SCCM agent installation is also working for domain joined machine.

    But when i try to install agent manually in workgroup computer it fails. even i have created new certificate template in local CA to get certificate based on common name rather than DNS name and install client certificate in workgroup machine. Also install rootca in same machine to validate the certificate.

    i run following command from command prompt.

    ccmsetup.exe /mp:sccm-iraq.domain.local SMSSITECODE=001 SMSMP=sccm-iraq.domain.local DNSSUFFIX=domain.local

    Following full ccmsetup.log.

    <![LOG[Sending message header '{346D8B85-DA21-45AE-A9A3-5C62C4DC2B04}HUAWEI-CHECKmp:[http]MP_LocationManagerdirect:HUAWEI-CHECK:LS_ReplyLocations36005931sccm-iraq.domain.localMP_LocationManagerSynchttp2018-08-21T08:24:54Z’]LOG]!>

    <![LOG[Sending message body '

    <![LOG[Sending message header '{C59EE9D7-FC8D-485E-A0E8-7CD4897BFF50}HUAWEI-CHECKmp:[http]MP_LocationManagerdirect:HUAWEI-CHECK:LS_ReplyLocations36005931sccm-iraq.domain.localMP_LocationManagerSynchttp2018-08-21T08:24:54Z’]LOG]!>

  4. Hi i manage to deploy the agent onto win10 client but the client is unable to detect the windows update. May i please check what to configure for network access account


Leave a Comment